rundll32
One day a process was eating up 90% of my CPU time, and its name was RUNDLL32. Arg, I hate that ! That little program is used to start COM objects and other nuisances. So then I patched RUNDLL32 to write its startup arguments to the event log. Once you've installed this tool, you'll see entries like the following in the Event Viewer Application Log:
RUNDLL32.EXE: GetCommandLineW(): "C:\WINNT\System32\RUNDLL32.EXE" TWEAKUI.CPL,TweakMeUp
So you know what's up. I'm sorry I couldn't come up with a more reasonable name, but at that point I was simply annoyed.
Download
This little hack is released as freeware, without any license attached. Use at own risk. Download here (6.241 bytes). You can also download the complete sourcecode (4.740 bytes).
Installation on Windows NT
Just extract rundll32.exe to your \winnt\system32
directory. Maybe you'll want to rename or backup your existing copy of
rundll32.exe, you really should.
Installation on Windows 2000
Installation on Windows 2000 is a bit more tricky because of the stupid "System File Protection" stuff. Here's howto:
- Delete
RUNDLL32.EXEfrom\winnt\system32\dllcache. This is a "master" directory for the \winnt\system32 files SFP keeps. - Maybe you'll want to rename or backup your
existing copy of
rundll32.exe, you really should. - Extract the files from the download archive
to
\winnt\system. You'll get a warning thatrundll32.exehas been replaced, cancel that. - Done.
Note that the first step is vital, otherwise SFP will silently overwrite the patched version. Duh.
Installation on Windows XP
I have no idea, I don't use Windows XP.